Medium severity5.5NVD Advisory· Published Mar 25, 2020· Updated Jun 17, 2026
CVE-2019-20633
CVE-2019-20633
Description
GNU patch through 2.7.6 contains a free(p_line[p_end]) Double Free vulnerability in the function another_hunk in pch.c that can cause a denial of service via a crafted patch file. NOTE: this issue exists because of an incomplete fix for CVE-2018-6952.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
15- GNU/patchdescription
- osv-coords12 versionspkg:apk/chainguard/patchpkg:apk/chainguard/patch-docpkg:apk/wolfi/patchpkg:apk/wolfi/patch-docpkg:rpm/opensuse/patch&distro=openSUSE%20Leap%2015.5pkg:rpm/opensuse/patch&distro=openSUSE%20Leap%2015.6pkg:rpm/opensuse/patch&distro=openSUSE%20Tumbleweedpkg:rpm/suse/patch&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP5pkg:rpm/suse/patch&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP6pkg:rpm/suse/patch&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5pkg:rpm/suse/patch&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5pkg:rpm/suse/patch&distro=SUSE%20Linux%20Micro%206.0
< 2.7.6-r3+ 11 more
- (no CPE)range: < 2.7.6-r3
- (no CPE)range: < 2.7.6-r3
- (no CPE)range: < 2.7.6-r3
- (no CPE)range: < 2.7.6-r3
- (no CPE)range: < 2.7.6-150000.5.6.1
- (no CPE)range: < 2.7.6-150000.5.6.1
- (no CPE)range: < 2.7.6-8.1
- (no CPE)range: < 2.7.6-150000.5.6.1
- (no CPE)range: < 2.7.6-150000.5.6.1
- (no CPE)range: < 2.7.5-8.11.1
- (no CPE)range: < 2.7.5-8.11.1
- (no CPE)range: < 2.7.6-3.1
Patches
Vulnerability mechanics
News mentions
0No linked articles in our index yet.